aws-key-disabler

AWS Lambda - IAM Access Key Disabler The AWS Key disabler is a Lambda Function that disables AWS IAM User Access Keys after a set amount of time in order to reduce the risk associated with old access keys. AWS Lambda Architecture SysOps Output for EndUser Developer Toolchain Current Limitations A...

CVE-2025-26794-exploit

CVE-2025-26794: Exim ETRN SQL Injection Exploit A proof-of-concept exploit tool for CVE-2025-26794, demonstrating SQL injection vulnerability in Exim 4.98 mail server via the ETRN command when using SQLite DBM storage. ⚠️ Legal Disclaimer FOR AUTHORIZED SECURITY TESTING ONLY This tool is provided...

ghostscript-CVE-2023-43115

ghostscript-CVE-2023-43115 A small write-up with examples to help understand CVE-2023-43115. !WARNING I wrote this mainly for myself to understand the problem and to learn about cybersecurity. So there may be errors. The Problem To utilize the IJS device Improved Inkjet Printing, Ghostscript is...

CVE-2024-25081_2025-47273

CVE-2024-25081 and CVE-2025-47273 Proof of Concept FontForge ≤ 20230101 version and Setuptools library Proof of concept for elevating privileges to the user running a task that uses Font Forge. The second CVE elevates privileges to root, provided you have write permissions to sensitive directorie...

CVE-2021-27928

CVE-2021-27928 En este repositorio, encontrarás una prueba de concepto de la explotación de la vulnerabilidad CVE-2021-27928 a través de un contenedor docker. root@kitploit: Exploit Title: MariaDB 10.2 /MySQL - 'wsrepprovider' OS Command Execution Date: 03/18/2021 Exploit Author: Central InfoSec...

connectwise-automate-AiTM-rce

ConnectWise Automate Ejecución Remota de Código mediante Adversario en el Medio Tabla de Contenidos Antecedentes Cronología Reflexiones y Aprendizajes Divulgación Responsable Código PoC Informe Proporcionado a ConnectWise Resumen Configuración Vulnerable Impacto Detalles Técnicos 1. Transporte...

CVE-2023-46604-RCE

CVE-2023-46604-RCE Vulnerability A deserialization vulnerability in the OpenWire transport unmarshaller in Apache ActiveMQ. Affected versions include 5.18.0 through to 5.18.2, 5.17.0 through to 5.17.5, 5.16.0 through to 5.16.6, and all versions before 5.15.16. Setup Change the Values inside the...

haaukins

Haaukins Haaukins is a highly accessible and automated virtualization platform for security education, it has three main components Docker, Virtualbox and Golang, the communication and orchestration between the components managed using Go programming language. The main reason of having Go...

CVE-2020-5902

CVE-2020-5902 In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface TMUI, also referred to as the Configuration utility, has a Remote Code Execution RCE vulnerability in undisclosed pages. Proof of concept...

heartbleed

heartbleed A simple tool written in Ruby wich allow testing your servers for OpenSSL CVE-2014-0160 vulnerability. Disclaimer I will not be taken responsible for the damage that could be done using this tool. It was written to check private servers for a precise vulnerability and measure potential...

domhttpx

domhttpx is a google search engine dorker with HTTP toolkit built with python, can make it easier for you to find many URLs/IPs at once with fast time. List Install Usage Flags Basic Usage One Keyword Multiple Keyword Extract Title Page Extract Title Page from Real Path Extract Status Code Extrac...

CVE-2024-3094

CVE-2024-3094 CVE-2024-3094 Lab Environment Setup and Report CVE-2024-3094 Practice Reproduced the backdoor inserted in XZ Utils 5.6.0 and 5.6.1 in a lab environment, analyzing SSH authentication hooking status and risks. Environment Host OS : - Windows 11 Docker : Docker Desktop 28.0.1 Dockerfil...

CVE-2023-32784-EXPLOIT-REPORT

CVE-2023-32784 Exploit Demonstration Project Overview This repository provides a demonstration of CVE-2023-32784, a critical vulnerability found in KeePass versions prior to 2.54. The exploit allows the recovery of the master password through memory dumps, exposing stored credentials. This...

CVE-2025-20281-Cisco

CVE-2025-20281 - Cisco ISE RCE Vulnerability Checker This script checks for the presence of the CVE-2025-20281 vulnerability in Cisco Identity Services Engine ISE and ISE-PIC, which allows unauthenticated remote code execution RCE as root due to insufficient input validation in a specific API. Th...

cdt-vulnsamba-deploy

CDT Team Delta - Vulnerable Samba Deployment Overview This repo is an Ansible-based deployment of a vulnerable Samba file server affected by CVE-2017-7494, a critical remote code execution vulnerability. This will hopefully be deployed for team Delta during the Grey Team phase. Vulnerability...

THM-Vulnerability_Capstone-CVE-2018-16763

THM-VulnerabilityCapstone-CVE-2018-16763 A write up on the THM room Vulnerability Capstone & Exploit script for CVE-2018-16763. CREDITS I do not take credit for the discovery of this vulnerability. Thank you to the following people. Vulnerability Discovery: 0xd0ff9 TryHackMe Room & Author:...

CVE-2019-9193byVulHub

CVE-2019-9193byVulHub Ejecución de comandos arbitrarios con privilegios de administrador en PostgreSQL CVE-2019-9193 Descripción PostgreSQL es un potente sistema de gestión de bases de datos relacional de código abierto. Una vulnerabilidad presente en las versiones de la 9.3 a la 11 permite a los...

CVE-2021-26295

CVE-2021-26295 CVE-2021-26295 EXP can successfully get a reverse shell This article and tool are for technical sharing only. Any illegal use is strictly prohibited. The user shall bear all consequences. Trigger command execution EXP 1. VPS starts RMI listener on port 9999 root@kitploit: java -cp...

SharpStay

SharpStay - Persistencia .NET Compilación Para compilar, abre el proyecto de Visual Studio y compila para release. Opciones Claves de Registro Elevadas Clave de Registro UserInit Elevada Tarea Programada Elevada Crear Servicio Elevado Suscripción a Evento WMI Elevada Clave de Registro...

Cisco-CVE-2025-20281-illdeed

CVE-2025-20281 — Cisco ISE ERS API Unauthenticated RCE Exploit This repository contains a Python 3 proof-of-concept exploit for CVE-2025-20281 , a critical vulnerability in Cisco Identity Services Engine ISE that allows unauthenticated remote code execution RCE as root via the ERS API. 🩻...